@atlasauth/cli 0.24.0 → 0.25.0

package/dist/migrate/framework/plugin.d.ts

@@ -1,167 +0,0 @@
-import type { MigrationBundleWriter, MigrationSource } from '@atlasauth/migrate';
-import type { ParsedArgs } from '../../args';
-import type { RunContext } from '../../context';
-import type { Json } from '../../serialize';
-/**
- * The TRANSLATOR PLUGIN interface behind `atlas migrate <vendor> [config|export|import|bridge]`.
- *
- * One plugin per vendor, registered in ./registry.ts. The framework owns the
- * command surface, the resumable orchestrator (`atlas migrate <vendor>` with
- * no subcommand runs every step with checkpoints), the upload/import of the
- * bundle, the bridge settings call and the codemod hand-off; a plugin only
- * supplies the vendor-specific parts:
- *
- *   config  read the vendor's configuration (its API with the owner's
- *           credentials, an export file, or the app's config source) and
- *           translate it into Atlas config-as-code plus a report in which
- *           every setting is `mapped` (1:1), `differs`, or `manual`, with where
- *           it came from (file:line or the vendor setting path).
- *   export  read the vendor's users / orgs / … and write them through the
- *           {@link MigrationBundleWriter} the framework hands over (sealed to
- *           the instance's import key). Vendor credentials come from flags or
- *           env vars ON THIS MACHINE and are never sent to Atlas.
- *   bridge  the zero-logout bridge preset and its variables (resolved from the
- *           translation or flags), applied with PUT /v1/migrations/{source}/bridge.
- *   lazy    the lazy-migration preset for vendors whose hashes never leave
- *           (applied with PUT /v1/legacy_auth_connection).
- *   code    the `atlas migrate code --from <vendor>` codemod id, when one exists.
- */
-export type ReportStatus = 'mapped' | 'differs' | 'manual';
-/** One line of the translation report. */
-export interface TranslationReportEntry {
-    status: ReportStatus;
-    /** The vendor area (`connections`, `tenant settings`, `plugin:organization` …). */
-    area: string;
-    /** The vendor setting path (`session_lifetime`, `password_policy.min_length`). */
-    setting: string;
-    /** Where it lands in Atlas (`auth_config.session.idleMs`, `oauth_providers google`). */
-    atlas?: string;
-    note: string;
-    /** Source location for a config read from code (file and 1-based line); absent for an API/file read. */
-    file?: string;
-    line?: number;
-}
-/** Atlas config-as-code, as `atlas config import --dir` reads it. Keys are the document types. */
-export type ConfigDocuments = Record<string, Json>;
-export interface TranslationResult {
-    /** Where the config was read from, for the report header (`auth0 tenant acme.us.auth0.com`, `src/auth.ts`). */
-    origin: string;
-    documents: ConfigDocuments;
-    report: TranslationReportEntry[];
-    /** Env vars the documents' `${NAME}` placeholders need at import time. */
-    env: Array<{
-        name: string;
-        for: string;
-    }>;
-    /** Vendor ids → Atlas ids for the data import and the codemod (provider keys, role keys). */
-    mappings: {
-        providers: Record<string, string>;
-        roles: Record<string, string>;
-    };
-    /** What the bridge step needs, when the translation learned it (preset variables, cookie names). */
-    bridge?: {
-        preset: string;
-        vars: Record<string, string>;
-    };
-    /** What the lazy-migration step needs, when the translation learned it. */
-    lazy?: {
-        preset: string;
-        config: Record<string, string>;
-    };
-}
-/**
- * A credential an exporter needs, read from `--set <flag>=<value>` or an env
- * var — never sent to Atlas. (Vendor flags are `--set` pairs because the CLI's
- * option schema is strict and shared by every command.)
- */
-export interface CredentialSpec {
-    /** The `--set` name (`auth0-domain` → `--set auth0-domain=acme.us.auth0.com`). A leading `--` is ignored. */
-    flag: string;
-    /** The env var (`AUTH0_DOMAIN`). */
-    env: string;
-    label: string;
-    required: boolean;
-    secret?: boolean;
-}
-/** Everything a plugin step gets. */
-export interface PluginContext {
-    ctx: RunContext;
-    args: ParsedArgs;
-    /** The project folder (`atlas migrate <vendor> <step> [path]`). */
-    project: string;
-    /** `--set` / env lookup for a credential spec (`--set` wins). Throws a CliError when a required one is missing. */
-    credential(spec: CredentialSpec): string | undefined;
-    /** HTTP for the VENDOR's API (injectable for tests — never real vendors in tests). */
-    fetch: typeof fetch;
-    /** Progress line (stderr in --json mode). */
-    say(line: string): void;
-    dryRun: boolean;
-}
-export interface ExportSummary {
-    counts: Record<string, number>;
-    omitted: Record<string, {
-        count: number;
-        reason: string;
-    }>;
-    warnings: string[];
-}
-/** An exporter's checkpoint, so `--resume` restarts a long export where it stopped (opaque to the framework). */
-export type ExportCursor = Json;
-export interface MigrationPlugin {
-    /** CLI spelling (`auth0`, `better-auth`). */
-    vendor: string;
-    source: MigrationSource;
-    label: string;
-    /** One-paragraph help for `atlas migrate <vendor> --help`. */
-    help: string;
-    config?: {
-        /** What `config` reads (`your Auth0 tenant via the Management API`, `your auth.ts`). */
-        reads: string;
-        credentials?: CredentialSpec[];
-        translate(p: PluginContext): Promise<TranslationResult>;
-    };
-    export?: {
-        reads: string;
-        credentials: CredentialSpec[];
-        /**
-         * Write every record through `writer` in canonical model order (the writer
-         * enforces it). `cursor` is the last checkpoint this export saved with
-         * `checkpoint` (resume), or null on a fresh run.
-         */
-        run(p: PluginContext, writer: MigrationBundleWriter, resume: {
-            cursor: ExportCursor | null;
-            checkpoint(cursor: ExportCursor): void;
-        }): Promise<void>;
-        /** Input checks before the import key is fetched or a segment is opened (throw a CliError to stop). */
-        check?(p: PluginContext): void;
-        /** What cannot be exported and the fallback, shown before the export runs. */
-        limits?: string[];
-    };
-    bridge?: {
-        /** The default preset; a translation's `bridge.preset` (e.g. Auth.js JWT vs database sessions) wins over it. */
-        preset: string;
-        /** When the vendor has several presets (hosted / self-hosted, token / cookie): the one the flags pick; `preset` otherwise. */
-        presetFor?(p: PluginContext, translation?: TranslationResult): string;
-        /** Preset variables from flags / the translation; missing ones are asked for. */
-        vars(p: PluginContext, translation?: TranslationResult): Record<string, string>;
-        /**
-         * The HS256 shared secret for presets whose tokens are signed on the
-         * owner's server (a bridge assertion from an extractor), or undefined.
-         * Sent once as `shared_secret` (write-only on the Atlas side).
-         */
-        sharedSecret?(p: PluginContext, preset: string): string | undefined;
-    };
-    lazy?: {
-        preset: string;
-        config(p: PluginContext, translation?: TranslationResult): Record<string, string>;
-        /**
-         * Only a fallback (the hashes export): the program skips the step unless
-         * the translation asked for it or settings were given.
-         */
-        optional?: boolean;
-        /** Where the vendor secret comes from (a credential spec), when the preset needs one. */
-        secret?: CredentialSpec;
-    };
-    /** The codemod vendor id (`atlas migrate code --from <id>`). */
-    codemod?: string;
-}

package/dist/migrate/framework/plugin.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=plugin.js.map

package/dist/migrate/framework/plugin.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../../src/migrate/framework/plugin.ts"],"names":[],"mappings":""}

package/dist/migrate/framework/registry.d.ts

@@ -1,11 +0,0 @@
-import type { MigrationPlugin } from './plugin';
-export declare function registerMigrationPlugin(plugin: MigrationPlugin, options?: {
-    replace?: boolean;
-}): void;
-/** Whether a plugin is registered under exactly this vendor name (no alias / source matching). */
-export declare function hasMigrationPlugin(vendor: string): boolean;
-/** The plugin for a vendor spelling (`auth0`, `aws-cognito`, `next-auth` …), or undefined. */
-export declare function migrationPlugin(vendor: string): MigrationPlugin | undefined;
-export declare function migrationPlugins(): MigrationPlugin[];
-/** Test helper: forget every registered plugin. */
-export declare function resetMigrationPlugins(): void;

package/dist/migrate/framework/registry.js

@@ -1,44 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerMigrationPlugin = registerMigrationPlugin;
-exports.hasMigrationPlugin = hasMigrationPlugin;
-exports.migrationPlugin = migrationPlugin;
-exports.migrationPlugins = migrationPlugins;
-exports.resetMigrationPlugins = resetMigrationPlugins;
-const migrate_1 = require("@atlasauth/migrate");
-/**
- * The `atlas migrate <vendor>` plugin registry. A vendor track adds its plugin
- * module under src/migrate/<vendor>/ and one line to BUILT_IN_PLUGINS in
- * ./builtins.ts — nothing else in the framework changes.
- */
-const plugins = new Map();
-function registerMigrationPlugin(plugin, options = {}) {
-    if (plugins.has(plugin.vendor) && !options.replace)
-        throw new Error(`atlas migrate: plugin "${plugin.vendor}" is already registered.`);
-    plugins.set(plugin.vendor, plugin);
-}
-/** Whether a plugin is registered under exactly this vendor name (no alias / source matching). */
-function hasMigrationPlugin(vendor) {
-    return plugins.has(vendor.toLowerCase());
-}
-/** The plugin for a vendor spelling (`auth0`, `aws-cognito`, `next-auth` …), or undefined. */
-function migrationPlugin(vendor) {
-    const direct = plugins.get(vendor.toLowerCase());
-    if (direct)
-        return direct;
-    const source = (0, migrate_1.sourceFromVendor)(vendor);
-    if (!source)
-        return undefined;
-    for (const p of plugins.values())
-        if (p.source === source)
-            return p;
-    return undefined;
-}
-function migrationPlugins() {
-    return [...plugins.values()].sort((a, b) => a.vendor.localeCompare(b.vendor));
-}
-/** Test helper: forget every registered plugin. */
-function resetMigrationPlugins() {
-    plugins.clear();
-}
-//# sourceMappingURL=registry.js.map

package/dist/migrate/framework/registry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/migrate/framework/registry.ts"],"names":[],"mappings":";;AAWA,0DAGC;AAGD,gDAEC;AAGD,0CAOC;AAED,4CAEC;AAGD,sDAEC;AAtCD,gDAAsD;AAGtD;;;;GAIG;AAEH,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;AAEnD,SAAgB,uBAAuB,CAAC,MAAuB,EAAE,UAAiC,EAAE;IAClG,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,MAAM,0BAA0B,CAAC,CAAC;IACvI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,kGAAkG;AAClG,SAAgB,kBAAkB,CAAC,MAAc;IAC/C,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,8FAA8F;AAC9F,SAAgB,eAAe,CAAC,MAAc;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACjD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,MAAM,GAAG,IAAA,0BAAgB,EAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE;QAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,CAAC,CAAC;IACpE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,gBAAgB;IAC9B,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,mDAAmD;AACnD,SAAgB,qBAAqB;IACnC,OAAO,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC"}

package/dist/migrate/framework/report.d.ts

@@ -1,17 +0,0 @@
-import { type Format } from '../../serialize';
-import type { MigrationPlugin, ReportStatus, TranslationReportEntry, TranslationResult } from './plugin';
-/**
- * Writing a plugin's translation: the config-as-code documents (the
- * `atlas config import --dir` format) plus `<vendor>-report.md` and
- * `<vendor>-report.json`. The JSON report holds the whole translation, so a
- * resumed run reads it back instead of asking the vendor again.
- */
-export declare const reportMd: (plugin: MigrationPlugin) => string;
-export declare const reportJsonName: (plugin: MigrationPlugin) => string;
-export declare function reportCounts(report: TranslationReportEntry[]): Record<ReportStatus, number>;
-export declare function renderTranslationReport(plugin: MigrationPlugin, t: TranslationResult): string;
-/** Write the documents (non-empty ones) and both reports into `dir`. Returns the file names written. */
-export declare function writePluginTranslation(plugin: MigrationPlugin, t: TranslationResult, dir: string, format: Format): string[];
-/** The translation a previous run wrote into `dir`, or undefined. */
-export declare function readPluginTranslation(plugin: MigrationPlugin, dir: string): TranslationResult | undefined;
-export declare function translationSummary(plugin: MigrationPlugin, t: TranslationResult, dir: string, written: string[]): string[];

package/dist/migrate/framework/report.js

@@ -1,103 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.reportJsonName = exports.reportMd = void 0;
-exports.reportCounts = reportCounts;
-exports.renderTranslationReport = renderTranslationReport;
-exports.writePluginTranslation = writePluginTranslation;
-exports.readPluginTranslation = readPluginTranslation;
-exports.translationSummary = translationSummary;
-const node_fs_1 = require("node:fs");
-const node_path_1 = require("node:path");
-const serialize_1 = require("../../serialize");
-/**
- * Writing a plugin's translation: the config-as-code documents (the
- * `atlas config import --dir` format) plus `<vendor>-report.md` and
- * `<vendor>-report.json`. The JSON report holds the whole translation, so a
- * resumed run reads it back instead of asking the vendor again.
- */
-const reportMd = (plugin) => `${plugin.vendor}-report.md`;
-exports.reportMd = reportMd;
-const reportJsonName = (plugin) => `${plugin.vendor}-report.json`;
-exports.reportJsonName = reportJsonName;
-const ORDER = ['manual', 'differs', 'mapped'];
-const HEADINGS = { manual: 'Needs a manual step', differs: 'Maps with a difference', mapped: 'Maps 1:1' };
-function reportCounts(report) {
-    const out = { mapped: 0, differs: 0, manual: 0 };
-    for (const e of report)
-        out[e.status] += 1;
-    return out;
-}
-const where = (e) => (e.file ? `${e.file}${e.line ? `:${e.line}` : ''}` : e.setting);
-const cell = (text) => text.replace(/\|/g, '\\|').replace(/\n/g, ' ');
-function renderTranslationReport(plugin, t) {
-    const c = reportCounts(t.report);
-    const lines = [`# ${plugin.label} → Atlas: configuration report`, '', `Read from ${t.origin}.`, '', `${c.mapped} map 1:1, ${c.differs} map with a difference, ${c.manual} need a manual step.`, ''];
-    if (t.env.length) {
-        lines.push('## Environment variables to set before applying', '');
-        for (const e of t.env)
-            lines.push(`- \`${e.name}\`: ${e.for}`);
-        lines.push('');
-    }
-    for (const status of ORDER) {
-        const entries = t.report.filter((e) => e.status === status);
-        if (!entries.length)
-            continue;
-        lines.push(`## ${HEADINGS[status]} (${entries.length})`, '', `| ${plugin.label} | Atlas | Note | Where |`, '|---|---|---|---|');
-        for (const e of entries)
-            lines.push(`| \`${cell(e.setting)}\` | ${e.atlas ? `\`${cell(e.atlas)}\`` : ''} | ${cell(e.note)} | \`${cell(where(e))}\` |`);
-        lines.push('');
-    }
-    for (const [title, map] of [['Provider ids', t.mappings.providers], ['Roles', t.mappings.roles]]) {
-        const rows = Object.entries(map);
-        if (!rows.length)
-            continue;
-        lines.push(`## ${title}`, '', `| ${plugin.label} | Atlas |`, '|---|---|');
-        for (const [from, to] of rows)
-            lines.push(`| \`${from}\` | \`${to}\` |`);
-        lines.push('');
-    }
-    return lines.join('\n');
-}
-/** Write the documents (non-empty ones) and both reports into `dir`. Returns the file names written. */
-function writePluginTranslation(plugin, t, dir, format) {
-    (0, node_fs_1.mkdirSync)(dir, { recursive: true });
-    const ext = format === 'json' ? 'json' : 'yaml';
-    const written = [];
-    for (const [type, value] of Object.entries(t.documents)) {
-        if (value === null || (Array.isArray(value) && value.length === 0))
-            continue;
-        const name = `${type}.${ext}`;
-        (0, node_fs_1.writeFileSync)((0, node_path_1.join)(dir, name), (0, serialize_1.serialize)(value, format));
-        written.push(name);
-    }
-    (0, node_fs_1.writeFileSync)((0, node_path_1.join)(dir, (0, exports.reportMd)(plugin)), renderTranslationReport(plugin, t));
-    (0, node_fs_1.writeFileSync)((0, node_path_1.join)(dir, (0, exports.reportJsonName)(plugin)), JSON.stringify({ object: 'config_translation', vendor: plugin.vendor, source: plugin.source, counts: reportCounts(t.report), translation: t }, null, 2) + '\n');
-    written.push((0, exports.reportMd)(plugin), (0, exports.reportJsonName)(plugin));
-    return written;
-}
-/** The translation a previous run wrote into `dir`, or undefined. */
-function readPluginTranslation(plugin, dir) {
-    const path = (0, node_path_1.join)(dir, (0, exports.reportJsonName)(plugin));
-    if (!(0, node_fs_1.existsSync)(path))
-        return undefined;
-    try {
-        return JSON.parse((0, node_fs_1.readFileSync)(path, 'utf8')).translation;
-    }
-    catch {
-        return undefined;
-    }
-}
-function translationSummary(plugin, t, dir, written) {
-    const c = reportCounts(t.report);
-    const out = [
-        `Read ${plugin.label} configuration from ${t.origin}.`,
-        `Wrote ${written.length - 2} config file(s) and the report to ${dir}: ${written.join(', ')}`,
-        `${c.mapped} map 1:1, ${c.differs} map with a difference, ${c.manual} need a manual step (see ${(0, node_path_1.join)(dir, (0, exports.reportMd)(plugin))}).`,
-    ];
-    if (t.env.length)
-        out.push(`Set before applying: ${t.env.map((e) => e.name).join(', ')}`);
-    for (const e of t.report.filter((x) => x.status === 'manual'))
-        out.push(`  manual  ${where(e)}  ${e.note}`);
-    return out;
-}
-//# sourceMappingURL=report.js.map

package/dist/migrate/framework/report.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"report.js","sourceRoot":"","sources":["../../../src/migrate/framework/report.ts"],"names":[],"mappings":";;;AAkBA,oCAIC;AAKD,0DAuBC;AAGD,wDAcC;AAGD,sDAQC;AAED,gDAUC;AA1FD,qCAA6E;AAC7E,yCAAiC;AACjC,+CAAyD;AAGzD;;;;;GAKG;AAEI,MAAM,QAAQ,GAAG,CAAC,MAAuB,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,YAAY,CAAC;AAArE,QAAA,QAAQ,YAA6D;AAC3E,MAAM,cAAc,GAAG,CAAC,MAAuB,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,cAAc,CAAC;AAA7E,QAAA,cAAc,kBAA+D;AAE1F,MAAM,KAAK,GAAmB,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC9D,MAAM,QAAQ,GAAiC,EAAE,MAAM,EAAE,qBAAqB,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAExI,SAAgB,YAAY,CAAC,MAAgC;IAC3D,MAAM,GAAG,GAAiC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAC/E,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,CAAyB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAC7G,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAE9E,SAAgB,uBAAuB,CAAC,MAAuB,EAAE,CAAoB;IACnF,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,CAAC,KAAK,MAAM,CAAC,KAAK,gCAAgC,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,sBAAsB,EAAE,EAAE,CAAC,CAAC;IACpM,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,iDAAiD,EAAE,EAAE,CAAC,CAAC;QAClE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,SAAS;QAC9B,KAAK,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,KAAK,MAAM,CAAC,KAAK,2BAA2B,EAAE,mBAAmB,CAAC,CAAC;QAChI,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACvJ,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAU,EAAE,CAAC;QAC1G,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,SAAS;QAC3B,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,MAAM,CAAC,KAAK,YAAY,EAAE,WAAW,CAAC,CAAC;QAC1E,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;QACzE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,wGAAwG;AACxG,SAAgB,sBAAsB,CAAC,MAAuB,EAAE,CAAoB,EAAE,GAAW,EAAE,MAAc;IAC/G,IAAA,mBAAS,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAChD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QACxD,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;YAAE,SAAS;QAC7E,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;QAC9B,IAAA,uBAAa,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,CAAC,EAAE,IAAA,qBAAS,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,IAAA,uBAAa,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAA,gBAAQ,EAAC,MAAM,CAAC,CAAC,EAAE,uBAAuB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/E,IAAA,uBAAa,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAA,sBAAc,EAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACjN,OAAO,CAAC,IAAI,CAAC,IAAA,gBAAQ,EAAC,MAAM,CAAC,EAAE,IAAA,sBAAc,EAAC,MAAM,CAAC,CAAC,CAAC;IACvD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,qEAAqE;AACrE,SAAgB,qBAAqB,CAAC,MAAuB,EAAE,GAAW;IACxE,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAA,sBAAc,EAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC;QACH,OAAQ,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAyC,CAAC,WAAW,CAAC;IACrG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAgB,kBAAkB,CAAC,MAAuB,EAAE,CAAoB,EAAE,GAAW,EAAE,OAAiB;IAC9G,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG;QACV,QAAQ,MAAM,CAAC,KAAK,uBAAuB,CAAC,CAAC,MAAM,GAAG;QACtD,SAAS,OAAO,CAAC,MAAM,GAAG,CAAC,qCAAqC,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC5F,GAAG,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,4BAA4B,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAA,gBAAQ,EAAC,MAAM,CAAC,CAAC,IAAI;KAChI,CAAC;IACF,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1F,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5G,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/migrate/frameworks/plugins.d.ts

@@ -1,29 +0,0 @@
-import { type FrameworkExport, Tables } from '../export/frameworks/tables';
-import type { MigrationPlugin, PluginContext } from '../framework/plugin';
-/**
- * The tables to export from: `--file` (an export script's NDJSON stream, or a
- * single JSON / NDJSON / CSV table file) and/or `--set dump=<dir>`.
- */
-export declare function readInput(p: PluginContext, opts?: {
-    singleFile?: (text: string, tables: Tables) => void;
-}): Tables;
-/** Write a framework export's rows through the bundle writer, in canonical order. */
-export declare function writeFrameworkExport(p: PluginContext, out: FrameworkExport, writer: Parameters<NonNullable<MigrationPlugin['export']>['run']>[1]): Promise<void>;
-/** Presets whose token is a bridge assertion signed on the owner's server (see the backend extractors). */
-export declare const ASSERTION_PRESETS: Set<string>;
-/**
- * The bridge secret shared by the extractor on your server and Atlas:
- * `--set bridge-secret=…` / ATLAS_BRIDGE_SECRET, else the one generated on an
- * earlier run, else a new one — kept in atlas-migrate/<vendor>/bridge-secret
- * (mode 0600) for your server's ATLAS_BRIDGE_SECRET.
- */
-export declare function bridgeSecret(p: PluginContext, vendor: string, preset: string): string | undefined;
-export declare const authJsPlugin: MigrationPlugin;
-export declare const luciaPlugin: MigrationPlugin;
-/** `google=googleId,github=github_id` → { google: 'googleId', github: 'github_id' }. */
-export declare function parsePairs(text: string): Record<string, string>;
-export declare const passportPlugin: MigrationPlugin;
-export declare const ironSessionPlugin: MigrationPlugin;
-export declare const devisePlugin: MigrationPlugin;
-export declare const djangoPlugin: MigrationPlugin;
-export declare const FRAMEWORK_PLUGINS: readonly MigrationPlugin[];